CVE-2023-50811
Last modified
CVE-2023-50811 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. An issue discovered in SELESTA Visual Access Manager 4.38.6 allows attackers to modify the “computer” POST parameter related to the ID of a specific reception by POST HTTP request interception. Iterating that parameter, it has been possible to access to the application and take control of many other receptions in addition the assigned one.. EPSS estimates a 0.45% chance of exploitation in the next 30 days.
Description
An issue discovered in SELESTA Visual Access Manager 4.38.6 allows attackers to modify the “computer” POST parameter related to the ID of a specific reception by POST HTTP request interception. Iterating that parameter, it has been possible to access to the application and take control of many other receptions in addition the assigned one.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Seling | Visual Access Manager | 4.38.6 |
References
- https://www.gruppotim.it/it/footer/red-team.htmlThird Party Advisory
- https://www.gruppotim.it/it/footer/red-team.htmlThird Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-50811?
How severe is CVE-2023-50811?
How do I fix CVE-2023-50811?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-50806A vulnerability was discovered in Samsung Mobile Processor, …8.4
- CVE-2023-50807A vulnerability was discovered in Samsung Wearable Processor…8.1
- CVE-2023-50808Zimbra Collaboration before Kepler 9.0.0 Patch 38 GA allows …6.1
- CVE-2023-50809In certain Sonos products before S1 Release 11.12 and S2 rel…7.8
- CVE-2023-5081An information disclosure vulnerability was reported in the …3.3
- CVE-2023-50810In certain Sonos products before Sonos S1 Release 11.12 and …6
- CVE-2023-5082The History Log by click5 WordPress plugin before 1.0.13 doe…7.2
- CVE-2023-50821A vulnerability has been identified in SIMATIC PCS 7 V9.1 (A…6.9
- CVE-2023-50822Improper Neutralization of Input During Web Page Generation …5.4
- CVE-2023-50823Improper Neutralization of Input During Web Page Generation …5.4
- CVE-2023-50824Improper Neutralization of Input During Web Page Generation …5.4
- CVE-2023-50825Improper Neutralization of Input During Web Page Generation …5.4
Are you affected by CVE-2023-50811?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST